We have the domain:


Which we are going through the process of obtaining an EV SSL certificate for. The site makes use of our static domain to server CSS/images etc. It has 4 subdomains:


To stop security warnings when loading static resources from https://www.scirra.com I'm guessing we need an SSL certificate for the static server.

  1. I'm guessing the .net certificate doesn't need to be EV
  2. I'm assuming the .net certificate doesn't have to be the same provider?

Amateur question I know but just want to check before we spend money on a cheap wildcard certificate for the static server.

2 Answers 2


You are correct on both counts. The .net certificate doesn't have to be an EV certificate, and doesn't have to be from the same provider.

Paypal does exactly what you want to do.

  1. https://www.paypal.com/ has an EV certificate from Verisign
  2. Static content is loaded from https://www.paypalobjects.com/, which is signed by Akamai and isn't an EV certificate.

Yes you need a certificate to stop warnings (though different browsers have different sorts of warnings, some are almost unnoticeable).

  1. Yes, it doesn't need to be EV - see What are the benefits of a more expensive SSL certificate?
  2. Yes, it doesn't matter.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.